A fixed monthly fee. I own your compliance platform, run the risk and review cycle, answer your customers' questionnaires and prepare every audit. You get the function without the hire.
Prices per month, excluding VAT. Invoiced monthly in advance. One month's notice. No minimum term.
You are certified and between audits, or you have a platform and nobody to run it.
Your enterprise customers send questionnaires and want security calls.
You need a compliance function and do not want to hire one yet.
Controls review in your platform. Red ones closed in order of risk. Owners chased. Evidence filed.
Questionnaires and customer calls. Answers from your own practices, not a template nobody can back.
Risks, suppliers and incidents. Registers updated. Decisions minuted.
One page to your management: what changed, what is open, what the auditor will ask.
For a company that is not certified yet. I build the management system with your team and hand you to the certification body. Most engagements become a retainer at the audit.
Six months. The steady pace.
Four months. A customer has set a date.
Three months. Everything at once.
The certification body's audit fee, typically EUR 6.000 to 12.000, is paid by you to them. It is never part of my price.
Scoped in days with a list of deliverables before you commit. For SOC 2 and ISAE 3402 readiness and for enterprise work that does not fit a plan.
Half a day a month keeps a certified management system current between yearly audits. When the questionnaires start, step up to a plan.
Ten minutes on a call, or an email. You leave knowing what is required, what it costs and when it is done.